[autoit] a lil help please guys

[trash]

Hi, seeing as you guys are great with autoit thought id see if
you would help me out a little seeing as ive got lost.
see what im looking to do is:

00486874   .  74 0F         JE SHORT Conquer.00486885
00486876   .  FF75 EC       PUSH DWORD PTR SS:[EBP-14]
00486879   .  8BCE          MOV ECX,ESI
0048687B   .  FF75 E8       PUSH DWORD PTR SS:[EBP-18]
0048687E   .  E8 04F70300   CALL Conquer.004C5F87

using autoit id like to be able to replace the two PUSH's for the x,y.
in olly when i set a breakpoint on them it shows like:

Stack SS:[0012F194]=000002C4

and converted from the hexadecimal to decimal would be 708.
Im not really sure im explaining myself properly
but what im aiming to do is set the ctrl down(well change the JE to JG which swaps the ctrl up down,which i can do)
then have it read my own coords and PUSH those
then call the Jump function all using autoit.
sighs.. not sure if you understand what im trying to do or even if its possible.
any tips or pointers would be great, thanks in advance.

[_fobos_]

Originally Posted by trash

Hi, seeing as you guys are great with autoit thought id see if
you would help me out a little seeing as ive got lost.
see what im looking to do is:

00486874   .  74 0F         JE SHORT Conquer.00486885
00486876   .  FF75 EC       PUSH DWORD PTR SS:[EBP-14]
00486879   .  8BCE          MOV ECX,ESI
0048687B   .  FF75 E8       PUSH DWORD PTR SS:[EBP-18]
0048687E   .  E8 04F70300   CALL Conquer.004C5F87

using autoit id like to be able to replace the two PUSH's for the x,y.
in olly when i set a breakpoint on them it shows like:

Stack SS:[0012F194]=000002C4

and converted from the hexadecimal to decimal would be 708.
Im not really sure im explaining myself properly
but what im aiming to do is set the ctrl down(well change the JE to JG which swaps the ctrl up down,which i can do)
then have it read my own coords and PUSH those
then call the Jump function all using autoit.
sighs.. not sure if you understand what im trying to do or even if its possible.
any tips or pointers would be great, thanks in advance.

Been there done that

Alright I'm not familiar with autoit at all, but i do know you can do like Read/WriteProcessMemory right?
I did the exact same thing but not with AutoIt, but just plain old VB, I'd say hardcode it into the exe to a static location, so change the push to something PUSH DWORD PTR DS:[some free mem. loc.]
and use Read/WriteProcessMemory to do the trick with AutoIt.

So for example:
1) Read location
2) if equal to <blabla>
3) Write to location
4) And do it all again

Would do the trick for setting coordinates but u still need to click to actually make the jump to the coordinates you have set.
Because all you do is set the coordinates that way, the clicking "triggers" the call

And since you cant send clicks to background windows u will still need to have the window active or face clicking jail
But the window on top kind of defeats the purpose right?
Because theres easier ways to jump to a certain spot

You need a way to call that function and well for that I cant suggest AutoIt, You'll need to write a dll with that function and inject it and trigger the function
But all that is beside what u asked so i'll shut it lol

Anyway hoped it helped some

[trash]

thanks for the responce,
I really did want to keep away from using dlls but i guess if youve already tried this
you know whats what.
Youve given me something to think about
thanks again.

[_fobos_]

Originally Posted by trash

thanks for the responce,
I really did want to keep away from using dlls but i guess if youve already tried this
you know whats what.
Youve given me something to think about
thanks again.

Youre welcome, I'm working on a same kind of thing it's why I responded
Right now i can make jumps on a minimized screen as long as the coordinates I set are correct and I found the attack function after some digging, which are the main things in a memory based bot. I think those two are most important things the rest should be a piece of cake.

Let me know if you need some help

(before anyone asks no, im not gonna give the addresses to the attack function just yet sorry but if you do some digging you'll find it! )